Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: jfi5BOEPzzMcFfCtcr+Ynib8RrksAbKML8eoB9o12CA=
Subject key identifier: 6C:44:3B:C3:CC:6E:CA:C5:B2:A9:DB:99:91:1B:9E:72:72:FB:37:E8
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 01975835EFC3542C5D7389955721CD007ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0A93
Signing time: Tue 10 Jun 2025 05:00:19 +0000
Manifest this update: Tue 10 Jun 2025 05:00:19 +0000
Manifest next update: Wed 11 Jun 2025 05:00:19 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: SW1pDI7WR9TuaRqGjnV78rxiZnHLlMnmxy8PTjPUKm0=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:35:ef:c3:54:2c:5d:73:89:95:57:21:cd:00:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jun 10 05:00:19 2025 GMT
Not After : Jun 11 05:00:19 2025 GMT
Subject: CN=6c443bc3cc6ecac5b2a9db99911b9e7272fb37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:c2:f8:12:70:2e:96:7f:e9:8a:bd:4d:aa:
18:36:c0:f0:d7:67:03:05:e3:7d:97:c8:1d:7c:d5:
4c:f8:79:af:c4:02:e2:d9:32:ba:69:aa:47:20:ab:
6a:56:b7:26:bf:3e:0c:03:df:7f:df:05:06:81:d3:
04:30:a1:51:b1:a1:f0:a8:27:30:99:55:2d:84:21:
32:14:1c:38:e5:ee:4b:01:9b:6d:98:ef:d2:e2:cf:
eb:92:03:c3:64:9d:26:85:a4:21:8a:77:e5:e8:40:
88:f3:06:74:78:40:f3:b7:ff:f4:03:26:2f:bb:73:
e0:2a:05:43:ba:68:d7:5e:47:ce:8e:07:78:8c:11:
23:af:9a:6d:34:86:53:68:c4:97:09:7d:b6:49:1d:
00:c0:dd:bd:db:b0:95:21:bd:6b:6d:37:60:f3:1e:
a8:4d:50:27:d9:93:18:49:81:36:a4:30:4d:0b:23:
71:cb:bb:0e:39:b3:42:0e:22:aa:29:05:04:0a:dc:
e9:ea:4c:fc:ed:6f:32:12:09:64:0f:1c:c0:25:13:
f1:40:ad:a2:e1:a3:f5:30:f9:8d:c2:ad:fb:2d:a3:
1d:98:07:d1:60:8f:26:c7:2c:4f:d2:41:f4:ac:e1:
cf:54:d4:8a:e2:2d:46:50:82:d0:8e:9b:57:cc:83:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:3B:C3:CC:6E:CA:C5:B2:A9:DB:99:91:1B:9E:72:72:FB:37:E8
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:53:d9:d7:5b:7b:20:92:47:e0:e3:b6:a7:db:8a:56:11:
20:13:a3:f7:91:5a:1d:93:19:8a:77:a3:4d:37:7e:f0:9f:bd:
65:ee:e0:6d:80:b4:c9:e7:77:5a:b0:47:e2:f8:9d:b3:95:bb:
dd:cd:11:f8:01:b8:03:11:9e:2b:56:33:2b:02:91:ba:4d:26:
ce:03:05:73:5a:57:1e:09:79:0c:fd:d0:31:89:e9:ea:00:d0:
4e:af:74:f3:2d:01:c6:81:10:34:11:fd:59:40:50:3d:b1:2b:
bf:6e:67:30:7a:d0:37:f4:58:15:02:4b:6b:76:16:ce:87:27:
4f:6e:7b:71:1d:b9:a9:f8:07:58:29:9c:b3:02:dc:29:e0:e7:
e0:49:c5:e5:03:26:52:85:ce:31:56:f4:fd:b7:20:9e:47:50:
1e:5a:99:26:c8:f9:1e:58:fd:1e:75:3a:63:05:9b:b9:2d:0f:
c0:71:be:68:ea:43:f6:3c:96:cb:4c:04:98:39:7f:75:ba:d7:
ff:f4:f6:90:81:58:06:59:af:93:d9:bc:f0:8e:f5:2f:50:23:
7c:c8:0e:53:3f:a8:6f:d3:9e:f0:b3:a5:4b:f0:40:4e:95:a4:
3a:27:cb:22:1e:f0:b5:0d:56:eb:01:40:b9:3f:9a:a5:d5:49:
cb:78:01:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYNe/DVCxdc4mVVyHNAHrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2
NjlmMTIwHhcNMjUwNjEwMDUwMDE5WhcNMjUwNjExMDUwMDE5WjAzMTEwLwYDVQQD
Eyg2YzQ0M2JjM2NjNmVjYWM1YjJhOWRiOTk5MTFiOWU3MjcyZmIzN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaXC+BJwLpZ/6Yq9TaoYNsDw12cD
BeN9l8gdfNVM+HmvxALi2TK6aapHIKtqVrcmvz4MA99/3wUGgdMEMKFRsaHwqCcw
mVUthCEyFBw45e5LAZttmO/S4s/rkgPDZJ0mhaQhinfl6ECI8wZ0eEDzt//0AyYv
u3PgKgVDumjXXkfOjgd4jBEjr5ptNIZTaMSXCX22SR0AwN2927CVIb1rbTdg8x6o
TVAn2ZMYSYE2pDBNCyNxy7sOObNCDiKqKQUECtzp6kz87W8yEglkDxzAJRPxQK2i
4aP1MPmNwq37LaMdmAfRYI8mxyxP0kH0rOHPVNSK4i1GUILQjptXzIP3IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxEO8PMbsrFsqnbmZEbnnJy+zfoMB8GA1UdIwQY
MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD9T2ddb
eyCSR+DjtqfbilYRIBOj95FaHZMZinejTTd+8J+9Ze7gbYC0yed3WrBH4vids5W7
3c0R+AG4AxGeK1YzKwKRuk0mzgMFc1pXHgl5DP3QMYnp6gDQTq908y0BxoEQNBH9
WUBQPbErv25nMHrQN/RYFQJLa3YWzocnT257cR25qfgHWCmcswLcKeDn4EnF5QMm
UoXOMVb0/bcgnkdQHlqZJsj5Hlj9HnU6YwWbuS0PwHG+aOpD9jyWy0wEmDl/dbrX
//T2kIFYBlmvk9m88I71L1AjfMgOUz+ob9Oe8LOlS/BATpWkOifLIh7wtQ1W6wFA
uT+apdVJy3gBlQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:39:10 2025 by rpki-client